use logs to create firestarter rules

[Mr5o1]

Hi all,

Fairly new to linux generally, and completely new to knoppix. I created a live-usb yesterday, very impressed with knoppix thus far.

I'm going to give this live-usb to my mother to use for internet banking. I'd like to create some very aggressive firewall rules, to block all traffic, and whitelist IPs or hosts which are for internet banking.

Trouble is, there's several banks involved, and accessing any of them involves communicating with several hosts. I'd like to login and logout of all the relevant banks, then check the log to see which hosts have been accessed, and create whitelist rules for each of them. Is there a log that will tell me this?

Any ideas / suggestions?